Skip to content
OpenAdvisories

Archive

December 2016

Vulnerabilities first published in this month (UTC), newest first.

518 results · Feed

  • High 7.0

    An exploitable buffer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system. The vulnerability is…

  • High 7.0

    An exploitable buffer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system. The vulnerability is…

  • High 7.8

    An exploitable integer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system. The vulnerability i…

  • High 8.8
    CVE-2016-6277 Exploited Public exploit Scanner template EPSS 100%

    NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.…

    KEV Mar 7, 2022
  • Unscored —

    A vulnerability in the update functionality of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA), Cisco W…

  • Unscored —

    A vulnerability in the implementation of X.509 Version 3 for SSH authentication functionality in Cisco IOS and IOS XE S…

    iOS
  • Unscored —

    A vulnerability in IPv6 packet fragment reassembly of StarOS for Cisco Aggregation Services Router (ASR) 5000 Series Sw…

  • Unscored —

    A vulnerability in HTTP URL parsing of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an unauthentica…

  • Unscored —

    A vulnerability in the web-based management interface of Cisco Emergency Responder could allow an unauthenticated, remo…

  • Unscored —

    A vulnerability in the web-based management interface of Cisco Firepower Management Center running FireSIGHT System sof…

  • Unscored —

    A vulnerability in the content filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances an…

  • Unscored —

    A vulnerability in the system management of certain FireAMP system processes in Cisco FireAMP Connector Endpoint softwa…

  • Unscored —

    A vulnerability in the installation procedure of the Cisco Hybrid Media Service could allow an authenticated, local att…

  • Unscored —

    A vulnerability in Cisco IOS on Catalyst Switches and Nexus 9300 Series Switches could allow an unauthenticated, adjace…

    iOS
  • Unscored —

    A vulnerability in the web management interface of the Cisco Unified Communications Manager IM and Presence Service cou…

  • Unscored —

    A vulnerability in TCP processing in Cisco FirePOWER system software could allow an unauthenticated, remote attacker to…

  • Unscored —

    A vulnerability in the Cisco application-hosting framework (CAF) of Cisco IOx could allow an authenticated, remote atta…

  • Unscored —

    A vulnerability in the Cisco Unified Reporting upload tool accessed via the Cisco Unified Communications Manager could …

  • Unscored —

    A vulnerability in the Decrypt for End-User Notification configuration parameter of Cisco AsyncOS Software for Cisco We…

  • Unscored —
    CVE-2016-9192 Public exploit

    A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to …

  • Unscored —

    A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco ASR 5000 Series Software could allow an…

  • Unscored —

    A vulnerability in Cisco IOS XR Software could allow an authenticated, local attacker to log in to the device with the …

    iOS
  • Unscored —

    A vulnerability in the malicious file detection and blocking features of Cisco Firepower Management Center and Cisco Fi…

  • Unscored —

    A vulnerability in the Zone-Based Firewall feature of Cisco IOS and Cisco IOS XE Software could allow an unauthenticate…

    iOS
  • Unscored —

    Cisco Identity Services Engine (ISE) contains a vulnerability that could allow an unauthenticated, remote attacker to c…

  • Unscored —

    A vulnerability in TCP port management in Cisco ONS 15454 Series Multiservice Provisioning Platforms could allow an una…

  • Unscored —

    A vulnerability in the web framework code of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote…

  • Unscored —

    A vulnerability in the File Management Utility, the Download File form, and the Serviceability application of Cisco Eme…

  • Unscored —

    A vulnerability in the Cisco Intercloud Fabric (ICF) Director could allow an unauthenticated, remote attacker to connec…

  • Unscored —

    A vulnerability in the HTTP traffic server component of Cisco Expressway could allow an unauthenticated, remote attacke…

  • Unscored —

    A vulnerability in the HTTP 2.0 request handling code of Cisco IOS XR Software could allow an unauthenticated, remote a…

    iOS
  • Unscored —

    A vulnerability in the ccmadmin page of Cisco Unified Communications Manager (CUCM) could allow an unauthenticated, rem…

  • Unscored —

    A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA) Switches could allow an u…

  • Unscored —

    A vulnerability in the Active Directory integration component of Cisco Identity Services Engine (ISE) could allow an un…

  • Unscored —
    CVE-2016-2334 Public exploit EPSS 15%

    Heap-based buffer overflow in the NArchive::NHfs::CHandler::ExtractZlibFile method in 7zip before 16.00 and p7zip allow…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in nGrinder before 3.4 allow remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2016-6664 Public exploit

    mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server bef…

  • Unscored —
    CVE-2016-6663 Public exploit

    Race condition in Oracle MySQL before 5.5.52, 5.6.x before 5.6.33, 5.7.x before 5.7.15, and 8.x before 8.0.1; MariaDB b…

  • Unscored —

    X.org libXi before 1.7.7 allows remote X servers to cause a denial of service (infinite loop) via vectors involving len…

  • Unscored —

    Integer overflow in X.org libXfixes before 5.0.3 on 32-bit platforms might allow remote X servers to gain privileges vi…